A flag is not the same thing as an indicator. An indicator is a number or a yes/no computed
from product events — it’s an input. A flag is something a person is meant to do something about.
What a flag carries
Addressed is not the same as closed
This is the distinction worth knowing, because it’s what stops a long-running risk nagging a team that has already dealt with it.- A flag closes by itself, when the account no longer matches the rule. Nobody closes a flag by hand.
- A flag is addressed by a person, meaning “we’ve seen this and it’s handled”. The condition may well still be true.
Filtering the list
Where flags come from
A flag rule points at a segment and a kind. Any account in that segment gets a flag of that kind; when it leaves the segment, the flag closes. Using segments means flag rules inherit everything segments already do, including the customers/accounts level — so a rule on a customer-level segment raises one flag per customer rather than one per account. Rules are checked every hour. Deleting a rule stops it raising anything new. Flags it already raised are kept, since removing them would rewrite what your team saw and acted on.Reading flags elsewhere
Flags are readable over the API and from MCP withlist_flags and get_flag, filtered by status, kind or account. The same needsAttention filter is available, so an assistant can be asked what needs attention today and get back the list you’d see on the page.
They’re read-only there. Opening and closing belongs to the rules, and marking one addressed is a statement about your team that should carry a real person’s name rather than an API key’s.
